Jump to content
bonienl

Dynamix WireGuard VPN

288 posts in this topic Last Reply

Recommended Posts

On 11/3/2019 at 10:32 AM, Hoopster said:


Yes, you cannot connect to docker containers on br0. You need either a VLAN or different NIC to which to assign docker containers that need a custom IP address.


Sent from my iPhone using Tapatalk

I have no issues accessing my br0 dockers using the fqdn i have assigned to them internally from my iPhone using Wireguard with Remote LAN connection, only using port forwarding (cant seem to get static routes to work on my Unifi setup) no VLAN's in use for br0 either

Edited by Can0nfan

Share this post


Link to post
17 hours ago, lviperz said:

Again, my apologies if this isn't the scope of this topic.

This is a support topic for Wireguard, I'm afraid your issue lies somewhere else.

I don't even think it's related to Unraid, you could create a topic here, or maybe some other forum.

Share this post


Link to post
5 hours ago, xorinzor said:

This is a support topic for Wireguard, I'm afraid your issue lies somewhere else.

I don't even think it's related to Unraid, you could create a topic here, or maybe some other forum.

No problem. You at least did confirm that wireguard and other vpn software doesn't seem to be the problem. Thank you.

Share this post


Link to post

So I got wireguard working and everything seemed to be good. Then i rebooted my server and now i can't get it to change from inactive to active. I had auto start on as well. The log shows me trying to start it up 'wireguard: Tunnel WireGuard-wg0 started'. I rebooted my server again just to make sure... no change. I'm not sure what else i should be checking. Thank you for your help.

Edited by clonednet
More Information

Share this post


Link to post
1 hour ago, clonednet said:

So I got wireguard working and everything seemed to be good. Then i rebooted my server and now i can't get it to change from inactive to active. I had auto start on as well. The log shows me trying to start it up 'wireguard: Tunnel WireGuard-wg0 started'. I rebooted my server again just to make sure... no change. I'm not sure what else i should be checking. Thank you for your help.

Can you post the output of the commands that have been mentioned in previous replies? Could help establish a baseline.
I think everyone here is roughly having the same problem.

Share this post


Link to post

I have an odd issue - I've been able to successfully connect to my server using the "Remote Tunneled Access" option on my phone without issue.  I created another peer of the same type to connect my Windows laptop, but the only way I could get it to work was to un-check the "Block Untunneled traffic (kill-switch)" option.  This seems to add "128.0.0.0/1" to the allowed IPs.

 

Does this mean that it's not routing all my traffic through the VPN? Is there some configuration I need to fix?

Share this post


Link to post

Hi everyone,

 

I am new to  unraid as well as wireguard but i really enjoy and appreciate the help on this forum.

Thanks a lot for the support and explaination !

 

I followed the instructaion and it work perfectly !

However i would like to be able to access my remote peer's LAN.

so i added a dynamic DNS to my peer's router and change the setting of wireguard to "LAN to LAN access".

 

configuration are as follow :

 

[UnRaid Server]

Network protocol : IPv4 only

Local tunnel network pool : 10.253.0.0/24

Local tunnel address : 10.253.0.1

Local endpoint : DynamicDNSOfTheUnraidServer.dns :51820

Local server use NAT : yes

 

[Peer]

Peer tunnel address : 10.253.0.6

Peer endpoint : DynamicDNSOfThePeerServer.dns : 51820

Peer allowed IPs : 10.253.0.6

 

when i try to connect my peer to the wireguard tunnel, i got this herror message :

 

"Unable to import configuration : invalid key for [Peer] section "address""

 

PS : my peer server and network is on 192.163.13.0/24

 

I saw that there were a TBD modification to do when "LAN to LAN access" would be use.

Is there anybody having more information about it ?

 

Thanks a lot for your help !

Share this post


Link to post

Hello i have spend a lot of time trying to make tis work, without luck. I am trying to connect with my android phone over 4g using qr code i also tryid with my wifes phone but i cant connect. I just want remote acess to server and smb share on the server. the port is open on my router so thats not the problem.  is there anyone here that can spot the problem? 

 

gicYHBo.pngQQhwtEx.png

Edited by MNM87

Share this post


Link to post
1 hour ago, MNM87 said:

Hello i have spend a lot of time trying to make tis work, without luck. I am trying to connect with my android phone over 4g using qr code i also tryid with my wifes phone but i cant connect. I just want remote acess to server and smb share on the server. the port is open on my router so thats not the problem.  is there anyone here that can spot the problem? 

 

gicYHBo.pngQQhwtEx.png

Because the local endpoint is your internal IP and not external? Just a guess. Recheck that and test for open ports to see if it's the firewall.

Edited by gxs

Share this post


Link to post

When "Remote access to server" is selected, you need to use the tunnel address "10.253.0.1" (not 10.11.1.155) to access your server from your remote client.

Share this post


Link to post

Hello unraiders,

I followed the guide and tried the troubleshooting steps, however I am still struggling a little to get wireguard working.

I have posted my setup here: Link to images of setup

Am I doing something quite stupid? I checked the port, appears to be forwarded ok.

I am running pihole on a seperate server, if that matters? I heard it can cause some issues for wireguard

 

Cheers

Share this post


Link to post

Hello,

 

I am unable to get a WireGuard to talk to my server/LAN (unable to view server IP in desktop). Everything sets up fine on the UnRaid side including the uPNP port forwarding. The issue I am having (found out through WireGuard Android log files) is initiating a handshake. I have tried multiple different settings mentioned throughout the forums, i.e. Add peer endpoint, change DNS settings, turn off UPnP, use IPv4 only etc. 

 

I have removed all personal settings and gone back to basics. Any advice / suggestions is appreciated. My settings are attached, as is my system log, Android log, and full diagnostics zip. Hope that covers everything, I tried to follow the Need help? guide as best as I could.

Screenshot_2020-02-19 brewerServer VPNmanager.png

brewerserver-diagnostics-20200219-1100.zip wireguard-log.txt

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.